Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/vlJ-tIHnVdrk7y9my7JdEikR4yw.roa
File: vlJ-tIHnVdrk7y9my7JdEikR4yw.roa (raw, json)
Hash identifier: 9n8L1tQkQ6D0p1UsqOhsiUmzZeGIJNcYWHFtx2ajib4=
Subject key identifier: BE:52:7E:B4:81:E7:55:DA:E4:EF:2F:66:CB:B2:5D:12:29:11:E3:2C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C4966F5519D542617AF32B073D3B79B2
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/vlJ-tIHnVdrk7y9my7JdEikR4yw.roa
Signing time: Tue 01 Jul 2025 06:04:42 +0000
ROA not before: Tue 01 Jul 2025 06:04:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
2001:67c:64:ffff:0:197:c496:1eff/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 01 Jul 2025 06:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:96:6f:55:19:d5:42:61:7a:f3:2b:07:3d:3b:79:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 1 06:04:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be527eb481e755dae4ef2f66cbb25d122911e32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:32:57:06:61:fb:ee:a7:69:6d:77:32:7a:
12:bf:88:dc:5e:f4:26:34:50:d1:0f:30:61:e6:61:
d7:c3:e7:3e:97:58:97:77:72:71:86:84:3b:9e:72:
8d:75:12:73:66:dc:c4:9f:61:a8:8f:39:a1:f5:f7:
1a:33:96:88:15:a8:0f:96:e5:d9:b6:cf:b4:59:5b:
1d:f7:96:06:e1:93:4b:da:df:a2:15:74:e1:50:e0:
09:08:f6:6f:b2:15:6b:69:a5:f4:79:11:d2:2b:6d:
f2:bf:db:66:a0:53:22:00:25:4b:87:ef:ec:f4:09:
7d:fa:19:38:20:07:ae:be:6c:c3:2a:f3:50:f3:fe:
57:f4:51:1c:e2:88:52:a6:d5:d2:44:29:46:6c:38:
95:5d:40:ab:91:28:83:7f:d2:f8:00:1f:3d:5e:fa:
09:40:0d:58:b3:b0:ca:bf:bf:7a:2a:94:1a:65:e1:
62:06:4c:6a:a5:43:f4:93:94:d0:c0:18:83:77:0d:
bb:5b:d8:57:fd:03:2f:a3:19:04:5c:55:76:d5:6d:
c3:51:39:3f:11:23:91:4b:1f:71:b3:3d:83:e3:ef:
67:85:80:aa:9d:0e:1a:d5:f5:7a:dd:2a:48:5c:19:
b1:a8:58:ef:71:d0:e1:b1:16:a0:c3:02:e3:22:e2:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:52:7E:B4:81:E7:55:DA:E4:EF:2F:66:CB:B2:5D:12:29:11:E3:2C
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/vlJ-tIHnVdrk7y9my7JdEikR4yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
2001:67c:64:ffff:0:197:c496:1eff/128
Signature Algorithm: sha256WithRSAEncryption
05:91:2b:a3:4d:59:1a:cd:b2:88:7a:eb:76:5c:69:9c:68:cc:
fd:da:a8:e9:18:c8:af:b4:7a:8f:b6:28:f5:6c:71:c6:51:27:
9e:bf:0b:3d:73:b3:d1:11:ad:0e:64:a3:71:48:ba:94:eb:e8:
50:1e:25:64:24:d6:a3:cd:69:5b:9d:15:24:4e:1f:4c:40:70:
62:78:53:5a:4b:d8:83:0e:b2:07:d6:82:c7:d0:67:c6:41:d7:
8a:7e:e9:ee:d7:79:3a:f4:7f:6d:0f:43:5e:3e:3c:35:8d:ab:
f8:ed:64:74:24:9f:2c:8d:1e:75:ef:09:ba:aa:cf:74:f0:3d:
38:40:e2:a7:00:46:4d:6d:04:fc:67:f6:65:6e:7f:93:92:cf:
7b:54:62:e5:2a:89:b4:7b:34:7a:c9:d4:f4:3c:df:e9:ce:e5:
0f:c3:2b:2e:6b:83:50:7c:dc:d3:2e:4f:d3:53:48:0b:da:96:
f9:28:e6:e4:ce:15:29:11:98:68:10:5d:0a:10:5a:58:20:11:
b2:58:5e:1d:3f:6a:d9:17:0d:40:35:aa:72:c6:22:77:ba:eb:
8b:81:fb:8b:d2:01:e7:c7:c5:5a:fe:0f:e9:eb:37:f2:eb:76:
1d:22:70:89:e5:7c:a4:9b:1a:cc:dd:fc:58:7a:29:07:03:81:
e2:84:78:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:56:55 2025 by rpki-client